>Hello. I'm being blackmailed by a user who claims he has gained unauthorized
>access to other users' accounts. I'm running IMail 6.06 with the user db in
>MSSQL 7. Am also running IIS5 on the same server. Any ideas on how I can
>track down potential security holes?
If he is asking for money to play nice, call the cops.
You might turn on ODBC logging (have some disk available) and then tell him
you are indeed very afraid of his power and will do wantever he wants, but
you need proof of his access.
Len
http://MenAndMice.com/DNS-training
http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/